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Abstract 

For a management solution such 3s Auto-Reorder, we need someplace to centrally store some of the ordering preferences so the 
customer can order and interact in a consistent fashion. 

Usually this consistency is implemented through the use of "cookies"*. However, cookies arc usually stored on the browsing PC This 
poses a problem when the customer may need to browse tocensistently from several PC's. 

This disclosure suggests a solution to the problem. 

Cookie Background 

What are Cookies? 

Cookies (aJfca. Magic Cookies) are used to pass a snippet of information to another system to make it do something. The cookie is 
usually a text file saved in your browser's directory or folder and stored in RAM while your browser is running. Most of the 
information in a cookie is usually mundane items, but some websites use cookies to store personal preferences. An example is when a 
browser stores your passwords anduserlD's. They are also used to store preferences of start pages. Common uses for cookks are: 

Online Ordering Systems - An online ordering system might use cookies that remember what a person wants to buy or credit 
card mformation. 

Site Personalization - If a person visits the MSNBC site but doesn't want to see any sports news, the website allows mo 
person to choose the option to not see sports news. The sdection is men stored in a cookie and stored on that persons PC 
The next time the person visits MSNBC, the cookie is retrieved and the person will not see any sports news. 
Targeted Marketing -A cookie can be used to build a profile of where you go and what advertisements you dick on. Ibis 
mformation is then ijs^ 

User IDs -In Internet Explorer 3 .0 the to part of the cookie is your Win95 login name. This could help identify "who" is 
accessing the website. 
How Cookies Work 

A^nmmW itneiti the HTML of ft document tells the browser to set a cookie of a certain name and value. An example used to set a 
cookie: 

Sat-Coofcfa HAME-VALUt; Expires- DATt path- PATH; donai DQMAHMMME; 

The cookie contains several parameters: 

- The name of the cookie. The name of the cookie and its value arc set snrmly by pairing them together. 

• The value of the cookie. 

• The expiration date of me cookie. The expiration date fetermmes the hfetime of the cookie. If a cookie lasts longer than 
the browser session, it is stored on the PC. 

• The path the cookie is valid for. The path parameter sets the URL path the cookie is valid within. Pages outside that path 
cannot read or use the cookie. 

• "H*e need for a secure connection to exist to use the cookie. 

Auto-Reorder Background 

ISD (Imaging Supplies Division) is implementing a consumables management (aJca. "Auto-reorder" & "Order Assistance 1 *) system 
for toner, paper, & maintenance items. The intent of mis system is to make management of printers easier for our customers. This 
particular disclosure focuses on a large corporate enviiiinment with many printers and a centralized MIS department 

One of the solutions ISD is investigating the implcmenfotkm of involves a centralized web server that is capable of monitoring a 
group or groups of printers (and other devices) and notifying an individual responsible for ordering consnmbles for the group of 
printers ("the purchaser). This urvxntion solves issues surrounding several scenarios: 

■ The pure baser may n ot always interact with the ordering system from the same PC each tune 

■ There may be more man one person acting in the role of purchaser for a group of printers. 
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• There may be several groups of printers, each with a separate purchaser, but a need to have uniformity throughout she 
corporation in the order placement. 
Another variant involves the web server being part of the printer with no person playing the role of a formal centralized punfaecr. 
Each of the scenarios is described in detail in the following section. 

The simple case... 

In this case there is one person responsible for a group of printers that does not always interact with the ordering system from the 
same PC each time. 

In this scenario, a centralized auto-reorder system monitors a group of printers. The Auto-reorder system has a built in webserver 
that is capable of sending an email to notify a purchaser when it is time to place an order. The email could contain all the required 
information and a hotlink that takes the purchaser directly to an external website, or the email may contain a hotlink that takes the 
purchaser back to the AiUo-wrdcr web page and then on to the external website. In either case, the purcha^ 
external ordering website with a shopping cart pre-built with all of their consumables ready to check out 

The external website has the additional complexity that it is run by an OEM (Le, HP), but the purchaser chooses a reseller to purchas e 
through {OfficeMax, OfficeDepot, Staples, etc). The first time the purchaser places an order through the system, they art 
to choose a 'favorite" reseller. The favorite needs to be stored in a cookie so that the purchaser does not have to identify themselves 
to the external website with each new interaction, nor does the purchaser have to n>se!ect their mvorite reseller. All of the 
purchaser's preferences will be stored m the cookie. 

Today, cookies are stored on the PC that is running the web browser. However, if the cookie is stored on any of the PC's, it will not 
be accessible if the purchaser switches to another PC . Each of the PC's has access to the web server that is monitoring the primers 
and prompting the fmrchaser to place an order- This makes the Auto-reorder web server a natural storage feeffity to anything central 
to die order process. 
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Case #2.,. 

Ia this case that is more than one person responsible for a group of printer*. 

This involves the same centralized Auto-reorder server, but different individuals acting as purchasers at difTerent time*. A «*sfi*d 
cookie would allow the storage of daia such as purchase order number, credit card information, shipping info, etc. This altonfe 
purchasers to coordinate and use the same mfbrmatign without consciously communicating* 
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Case 



^ cre m y be sacral purchaaen. each responsible for a different group of pr*te«. baUn^to^vc uniformity tfarousMtfe 
corporation in tne order placement (i.e. sharing a common purchase order, shipping a<wrew, etc.). 
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In this case ther« is no centralized Auto-reorder system and each printer prompts whichever end user is printing atme tunc itajkct m 
order ad hoc. The printer itself contains a web server that is capable of sending email or being an object that can be biowaedbyaweb 
browser. 

The end user receives notification in the farm of an email or some other alert that they are running low on toner (or some other 
consumable). The alert contains a hot-link that either takes the user back to the printer web page and then on to the external wfesfe 
or launches the user directly to the external website. In either case all of the ordering information is passed along with the URL. ff 
the user sets any preferences on the external website (the first person to do this might be an adniinistxator to initially setup and 
configure), these preferences need to be saved and stored in a central place where all the users have access. In this case it would bt on 
the printer. This gives consistency in where and how each end-user places the order. 



Embedded 
Web Server 
w/toner low 
notification & hot 
link 



PC browser 
Interface* 



End User* 



External Website 




t 
ft 




More Solution Details 

In order for any of these solutions to work, die browser needs an extension to the Cookie HTTP Specification. This extension would 
basically identity wnere the cookie is to be stored. It would allow the additional flexibility of providing a storage pathname that could 
be interpreted as being anywhere the browser PC could reach, This has some security issues, but these could be resolved separately - 
this could be a feature that could be turned on/off . 

The browser extension might happen in the form of a plug-in that enables this nnicttonab'ty (and may also qualify it to avoid the 
security issues). 

One form of security qualification is that the plug-in might only allow the "storage pathname" functionality with a specific website 
(HP provides one with die fictitious "HP Webdirector" website. . .)• Or the plug-in might maintain a list of trusted websites. 

Possible Claims: 

1 . The ability to designate where to store a cookie in the users environment (printer, pc server). 

2. The ability to share the cookie between multiple users or with access from multiple locations with the same user. 

3. Adding a parameter to the cookie specification designating where to store the cookie* 

4. A browser plug-in that rm"titaW a list of trusted locations to accept remote cookie storage parameters from. 

5. A browser plug-in that allows for security & cookie management 

6. Cookie contents. 
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